Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: +Iare8aM1OXa0j0R+B0eoWsYSOJi1/0gVP4PkoT17E0=
Subject key identifier: FA:5C:8E:14:88:F6:16:6A:1A:D2:1C:63:DE:D7:CD:19:A1:2A:60:D6
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019D984FDB59440DDBA1715E332D51EC85FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 100C
Signing time: Thu 16 Apr 2026 22:01:03 +0000
Manifest this update: Thu 16 Apr 2026 22:01:03 +0000
Manifest next update: Fri 17 Apr 2026 22:01:03 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: GFqxuxl70xWiquzI4BePtevGRm2aL4d1+Xx7CkllPjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:db:59:44:0d:db:a1:71:5e:33:2d:51:ec:85:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Apr 16 22:01:03 2026 GMT
Not After : Apr 17 22:01:03 2026 GMT
Subject: CN=fa5c8e1488f6166a1ad21c63ded7cd19a12a60d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:62:f6:a9:de:21:34:fe:c9:df:99:38:fb:
2a:ae:a2:24:ea:86:2a:99:7c:62:b7:ed:a7:a1:e1:
b3:fc:ee:53:ed:75:99:ac:5d:18:d5:f9:33:af:90:
98:d4:8a:b9:00:14:78:d5:c6:32:f3:76:88:eb:87:
58:8a:67:30:d2:3c:7b:79:fd:21:b0:50:cf:b5:5d:
2e:d8:ad:54:cd:37:1d:7b:2f:3a:82:84:04:74:2a:
29:7b:64:1e:51:69:ca:14:01:69:82:16:53:42:ca:
8c:a6:fa:ee:69:a4:d5:33:66:b1:7e:7c:c6:5d:d6:
69:ed:b4:56:9d:b8:8a:a4:ff:cb:9a:b5:d0:af:cc:
9e:b8:77:1e:fa:9a:94:f4:89:64:fd:63:f6:c4:e6:
c4:2b:e5:40:5e:d8:dd:3f:da:cc:4a:07:67:e4:13:
99:32:bb:66:bb:ec:e8:0b:a3:33:b9:ab:1b:8e:b3:
f6:43:b7:f9:64:09:51:64:12:b2:99:1c:53:94:db:
5b:b8:8f:21:d7:71:87:a9:e7:63:6d:b5:5c:a8:02:
cb:26:05:7f:ad:e4:59:ec:cb:34:7a:10:f1:be:5d:
83:bf:73:91:08:6f:c3:93:6d:c0:20:e8:a1:4a:6b:
d5:72:8c:59:89:b4:63:9d:6d:97:2a:66:cd:58:06:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5C:8E:14:88:F6:16:6A:1A:D2:1C:63:DE:D7:CD:19:A1:2A:60:D6
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1f:cd:9a:0f:95:29:eb:8f:fa:25:1e:4e:37:ed:b9:c7:85:
7d:38:3e:d0:32:c1:67:a5:32:b5:2a:1a:5a:5d:f1:53:f1:8c:
55:ec:d5:ce:4e:76:6a:49:07:ec:24:e8:06:66:c9:83:d0:17:
8d:0c:bb:28:9a:36:a2:d7:88:cf:00:d3:36:0a:57:2f:1a:24:
fb:8f:49:4c:d7:56:06:7f:94:2e:27:5c:0c:bc:ce:d5:76:7e:
95:cc:c1:b6:d3:6b:67:76:c8:bb:11:d8:f8:84:24:5d:0e:de:
af:77:97:b4:68:11:8d:00:5b:e8:47:71:b5:c5:63:68:f8:39:
17:8e:ef:1b:17:a2:19:88:ee:b6:94:f8:80:75:2e:fb:e0:42:
51:6d:3e:07:db:88:64:96:6e:42:f3:ee:7c:5a:b9:0c:04:4a:
d0:e5:9a:01:5a:54:2a:22:b5:00:f8:44:56:70:8a:f5:a2:dc:
e0:59:dc:d7:80:8e:40:25:50:20:ff:1f:b6:24:82:eb:c3:6f:
a3:82:c0:40:b7:7c:de:a6:2b:b9:2d:c3:bd:cf:a3:5c:71:a1:
d7:64:1e:11:af:d3:39:09:0f:4e:99:1f:07:16:85:5e:6f:fa:
b9:da:49:43:40:0f:e0:cc:f2:48:e4:94:ed:3d:2a:0d:d6:10:
8d:fc:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:02 2026 by rpki-client